CyberPanel kayıtları
cyberpanel üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 2 · %22,2
- Silahlaştırılmış
- 3 · %33,3
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %22,2
- Yayından KEV’e ortanca
- 23 gün
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-306 Missing Authentication for Critical Function2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
97Hemen | CVE-2024-51378Silahlaştırılmış | getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authenticatcyberpanel · cyberpanel · CWE-78 | Kritik9,8 | KEV | %94,7 | 29 Eki 2024 |
94Hemen | CVE-2024-51567Silahlaştırılmış | upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication andcyberpanel · cyberpanel · CWE-306 | Kritik9,8 | KEV | %84,4 | 29 Eki 2024 |
60Bu hafta | CVE-2024-51568Silahlaştırılmış | CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink.cyberpanel · cyberpanel · CWE-78 | Kritik9,8 | — | %47,6 | 29 Eki 2024 |
38İzleyin | CVE-2024-53376Kavram kanıtı | CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field tcyberpanel · cyberpanel · CWE-78 | Yüksek8,8 | — | %10,8 | 16 Ara 2024 |
35İzleyin | CVE-2019-13056İstismar yok | An issue was discovered in CyberPanel through 1.8.4.cyberpanel · cyberpanel · CWE-352 | Yüksek8,8 | — | %0,8 | 2 Tem 2019 |
35İzleyin | CVE-2026-41473Kavram kanıtı | CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpointscyberpanel · cyberpanel · CWE-306 | Yüksek8,8 | — | %0,7 | 24 Nis 2026 |
26İzleyin | CVE-2024-54679Kavram kanıtı | CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions.cyberpanel · cyberpanel · CWE-862 | Orta6,5 | — | %0,9 | 5 Ara 2024 |
24İzleyin | CVE-2024-56112İstismar yok | CyberPanel (aka Cyber Panel) before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php.cyberpanel · cyberpanel · CWE-79 | Orta6,1 | — | %0,2 | 16 Ara 2024 |
21İzleyin | CVE-2026-41472Kavram kanıtı | CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboardcyberpanel · cyberpanel · CWE-79 | Orta5,3 | — | %0,5 | 24 Nis 2026 |
- CVE-2024-5137897Hemen
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authenticat
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94cyberpanel · cyberpanel29 Eki 2024
- CVE-2024-5156794Hemen
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %84cyberpanel · cyberpanel29 Eki 2024
- CVE-2024-5156860Bu hafta
CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink.
KritikCVSS 9,8SilahlaştırılmışEPSS %47cyberpanel · cyberpanel29 Eki 2024
- CVE-2024-5337638İzleyin
CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the phpSelection field t
YüksekCVSS 8,8Kavram kanıtıEPSS %10cyberpanel · cyberpanel16 Ara 2024
- CVE-2019-1305635İzleyin
An issue was discovered in CyberPanel through 1.8.4.
YüksekCVSS 8,8İstismar yokEPSS %0cyberpanel · cyberpanel2 Tem 2019
- CVE-2026-4147335İzleyin
CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints
YüksekCVSS 8,8Kavram kanıtıEPSS %0cyberpanel · cyberpanel24 Nis 2026
- CVE-2024-5467926İzleyin
CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions.
OrtaCVSS 6,5Kavram kanıtıEPSS %0cyberpanel · cyberpanel5 Ara 2024
- CVE-2024-5611224İzleyin
CyberPanel (aka Cyber Panel) before f0cf648 allows XSS via token or username to plogical/phpmyadminsignin.php.
OrtaCVSS 6,1İstismar yokEPSS %0cyberpanel · cyberpanel16 Ara 2024
- CVE-2026-4147221İzleyin
CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard
OrtaCVSS 5,3Kavram kanıtıEPSS %0cyberpanel · cyberpanel24 Nis 2026